SMB Security Configuration Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Secure Operating System

What you'll be asked

  1. A security audit identifies that your Windows Server environment is still vulnerable to attacks targeting legacy protocols. Which version of SMB should be completely disabled to mitigate the risk of attacks like EternalBlue?
  2. You need to ensure that SMB traffic between a file server and its clients is protected against eavesdropping and remains confidential. Which feature provides end-to-end data encryption without requiring a VPN?
  3. A Windows Server is configured with the Group Policy setting 'Microsoft network server: Digitally sign communications (always)' set to 'Enabled'. What is the result if a legacy client that does not support SMB signing attempts to connect?
  4. To prevent lateral movement and unauthorized access, which PowerShell command should be used on a Windows client to prevent it from connecting to shares that allow unauthenticated guest access?
  5. SMB 3.1.1 introduced 'Pre-authentication integrity'. How does this feature specifically enhance security compared to previous SMB 3.x versions?

Answers and explanations come after you submit.